Privacy Shield Notice

EU-U.S. and Swiss-U.S. Privacy Shield Notice

Effective: July 31, 2018

monday.com, Inc. (“monday.com Inc.”, “We” or “Our”) has certified with the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield with respect to the Personal Data (defined below) we receive and process on behalf of the Customers (defined below) of monday.com Ltd. (“monday.com Ltd”) through our Service (defined below).

monday.com Inc. complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. monday.com Inc. has certified to the Department of Commerce that it adheres to the Privacy Shield Principles and our Privacy Shield certification is available here.

If there is any conflict between the terms in this notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

DEFINITIONS.
“Personal Data” means data that personally identifies or may be used to personally identify a person, whether directly or indirectly in combination with other data.
“Customer” means a prospective, current, or former customer, or client of monday.com Ltd.

SCOPE.
monday.com Inc. participation in the Privacy Shield applies to the Personal Data that monday.com Inc. receives from and processes on behalf of Customers of monday.com Ltd located in the EU. monday.com Inc. acts as a sub-processor processor of the Personal Data we process on behalf of the Customers (who are data controllers with respect to the personal data we process on behalf of monday.com Ltd).

PURPOSES OF DATA PROCESSING.
monday.com Ltd provides its Customers with a project management tool designed to improve work processes and create an environment of transparency in the Customer's organization and facilitates a more efficient and intuitive way to manage teams and entire operations. monday.com Ltd project management tool is made available to its Customers on a software as a service (SaaS) basis (the “Service”).
monday.com Inc. will only process the Personal Data we receive from monday.com Ltd, for the purposes our Service to the respective Customer. To fulfill these purposes, We may access the data to provide or offer the Service, to correct and address technical or service problems, or to follow instructions of Our customer who submitted the data, or in response to contractual requirements.

ONWARD TRANSFERS OF PERSONAL DATA.
We will not transfer Personal Information originating in the EU to third parties unless such third parties have entered into an agreement in writing with us requiring them to provide at least the same level of privacy protection to your Personal Information as required by the Principles of the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We will only transfer Personal Information to cloud service providers who need the information in order to provide services to or perform activities on Our behalf. In cases of onward transfer to third parties of data of EU individuals received pursuant to the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield, monday.com Inc. is potentially liable.

RIGHT TO ACCESS, CHANGE OR DELETE PERSONAL DATA.
Data subjects have the right to access Personal Data about them, and in some cases to limit use and disclosure of their Personal Data. If you would like to request access to the Personal Data we have processed on behalf of one of the Customers, please contact [email protected] and provide your name and contact information. monday.com Ltd will refer your request to the Customer, and will support them as needed in responding to your request.

REQUIREMENT TO DISCLOSE.
monday.com Inc. may be required in certain circumstances to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirement.

monday.com Inc. has further committed to refer unresolved privacy complaints under the EU-U.S. Privacy Shield Principles and the Swiss-U.S. Privacy Shield Principles to JAMS, a non-profit alternative dispute resolution provider located in the United States to assist with the complaint resolution process. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.jamsadr.com/eu-us-privacy-shield for more information and to file a complaint. The services of JAMS are provided at no cost to you.

monday further commits to cooperate with EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU and Switzerland in the context of the employment relationship. Data Subjects with inquiries or complaints regarding this Privacy Shield Notice should first contact monday at: [email protected]

U.S. FEDERAL TRADE COMMISSION ENFORCEMENT.
monday.com Inc. is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) to ensure compliance with the EU-US Privacy Shield Principles and the Swiss-U.S. Privacy Shield Principles outlined in this notice.